// npm package
@antv/f-lottie
FEngine for Lottie
versions
80
maintainers
51
license
MIT
first publish
2022-11-02
publisher
xuying1027
tarball
14,685 B
AUTO-PUBLISHED·1 version indexed·latest published 2026-01-21
// publisher campaignby xuying1027
6 caught packages from this accountThis is not an isolated catch. The same publisher has shipped 5 other packages that our pipeline flagged — the shape of a coordinated campaign, not a one-off. Each link below opens that sibling's analysis.
// offending code· @1.10.0· no static-pattern hits
llm: benign · 0.85→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
- @1.10.0··AUTO-PUBLISHED·publisher: xuying1027heuristic 75/100static flags 0llm benign (0.85) via ollamamature-packageosv-flagged:MAL-2026-3883
→ No suspicious destination, no remote-exec shape — 1 known-vendor host(s).
// offending code· no static-pattern hits
--- package.json (entry) --- { "name": "@antv/f-lottie", "version": "1.10.0", "description": "FEngine for Lottie", "main": "lib/index.js", "module": "es/index.js", "types": "es/index.d.ts", "keywords": [ "antv", "f2", "chart", "charts", "mobile", "visualization", "lottie" ], "dependencies": { "@antv/f-engine": "1.10.0", "@antv/g-lottie-player": "~0.2.0", "@babel/runtime": "^7.12.5", "tslib": "^2.3.1" }, "devDependencies": { "@antv/f-test-utils": "1.0.9" }, "homepage": "https://f2.antv.vision", "author": "https://github.com/orgs/antvis/people", "license": "MIT", "repository": { "type": "git", "url": "https://github.com/antvis/f2" }, "bugs": { "url": "https://github.com/antvis/f2/issues" }, "gitHead": "5bb6d8fc1e435eefbe4576a44fb427d3b909b0b5" } --- index.js (entry) --- "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.default = void 0; var _tslib = require("tslib"); var _fEngine = require("@antv/f-engine"); var _gLottiePlayer = require("@antv/g-lottie-player"); var Lottie = /** @class */function (_super) { (0, _tslib.__extends)(Lottie, _super); function Lottie(props) { var _this = _super.call(this, props) || this; _this.addLottie = function () { var _a = _this, props = _a.props, context = _a.context; var data = props.data, options = props.options, play = props.play; var canvas = context.canvas; if (!data) return; // 文档流后挂载lottie canvas.ready.then(function () { _this.animation = _this.animation ? _this.animation : (0, _gLottiePlayer.loadAnimation)(data, options); _this.animation.render(_this.ref.current); _this.size = _this.animation.size(); _this.updateSize(); // 播放控制 if (play) { var _a = play.speed, speed = _a === void 0 ? 1 : _a, _b = play.start, start = _b === void 0 ? 0 : _b, _c = play.end, end = _c === void 0
